Bolt for teams

AI for knowledge work, deployed on your terms.

Give every team member an agent that works in Word, Excel, PDFs, and the browser, with the identity, security, and governance controls your organization requires. Run it in our cloud or entirely in your own.

How it fits together

Your team's clients, one console you control.

Every team member runs the Bolt desktop app. Sign-in, requests, and actions all flow through the Bolt console & gateway — where you set identity, policy, budgets, connectors, and audit — self-hosted or in Bolt Cloud.

How the Bolt desktop client relates to the Bolt console Each team member's Bolt desktop app sends sign-in and every model and tool request to the central Bolt console and gateway, which returns policy and configuration. Admins manage the console; the console brokers identity with your IdP and routes, governs, and audits all traffic to models and MCP tools. Admin · IT team manage Bolt desktop app On every team member's device Works in Word, Excel, PDFs, browser Edits real files, on-device Human-in-the-loop on risky actions requests policy Bolt Console + Gateway Self-hosted or Bolt Cloud · the harness Identity · SSO (OIDC / SAML) SCIM user & group provisioning Governance & policy Approvals · guardrails · per-workspace AI gateway Virtual keys · budgets · model routing MCP connector catalog Governed tools, shared by app & gateway Audit & usage Request logs · spend · exportable trails OIDC/SAML routed governed Connected systems Identity provider Okta · Entra ID · Google · OneLogin Models OpenAI · Anthropic · Bedrock · self-hosted MCP tools & data Governed connectors & plugins

Clients authenticate through your IdP, then send every model and tool request through the console's AI gateway. Admins manage policy centrally, and every action is logged for audit.

Everything you need to deploy at scale

The same workstation your team loves, wrapped in the identity, control, and support an enterprise rollout demands.

SSO & provisioning

OIDC and SAML 2.0 single sign-on with your existing IdP: Okta, Microsoft Entra ID, Google, OneLogin. SCIM keeps users and groups in sync automatically.

Self-hosting & residency

Run the Bolt harness in your own cloud or VPC. Your documents and conversations never leave your infrastructure, and you choose the region.

Governance & guardrails

Human-in-the-loop approvals for anything irreversible, admin-defined policies, and per-workspace controls over tools, models, and connectors.

Audit & visibility

Centralized audit logs of actions and approvals, usage reporting by team, and exportable records for your security and compliance reviews.

AI gateway & models

One gateway routes every request: bring your own keys and subscriptions, use self-hosted models, or run offline. Central model policy, virtual keys, budgets, and spend tracking.

Dedicated support

A named point of contact, onboarding help, SLAs, and automation services to tailor Bolt to your team's workflows.

The AI gateway

Every model, key, and tool — through one gateway you control.

Every request from the desktop app — and from your own apps — runs through a self-hostable AI gateway. You decide which models run, what they can touch, and what they cost, without changing how your team works.

  • Route to any model: hosted, your own keys and subscriptions (BYOK), or self-hosted open models, with automatic fallbacks
  • Virtual keys with per-team budgets, rate limits, and real-time spend tracking
  • Guardrails on prompts and responses: PII, content, and custom policy filters
  • One governed catalog of MCP connectors and plugins, shared by the app, policy engine, and gateway
  • Human-in-the-loop approvals and per-workspace policy over tools, models, and connectors
  • Full request logs, usage analytics, and exportable audit trails

Identity, done right

Connect your IdP once. Everyone's in.

Bolt brokers identity through your provider, so access follows the systems you already trust, with no separate password sprawl to manage.

  • OIDC & SAML 2.0 single sign-on with PKCE
  • SCIM provisioning and de-provisioning of users and groups
  • Works with Okta, Microsoft Entra ID, Google Workspace, OneLogin, and more
  • Role and group mapping to Bolt workspaces and permissions
Okta
Entra ID
Google
OneLogin
OIDC
SAML

Deploy it your way

Bolt Cloud

We host the harness. Fastest to roll out, with hosted models available and your own keys supported.

Your cloud

Deploy the harness into your VPC for data residency and network control, managed alongside the rest of your stack.

Air-gapped

Run entirely offline against self-hosted models, with no outbound telemetry, for the most sensitive environments.